Richard Weinberger f38aed975c UBI: Fix invalid vfree() ... The logic of vfree()'ing vol->upd_buf is tied to vol->updating. In ubi_start_update() vol->updating is set long before vmalloc()'ing vol->upd_buf. If we encounter a write failure in ubi_start_update() before vmalloc() the UBI device release function will try to vfree() vol->upd_buf because vol->updating is set. Fix this by allocating vol->upd_buf directly after setting vol->updating. Fixes: [ 31.559338] UBI warning: vol_cdev_release: update of volume 2 not finished, volume is damaged [ 31.559340] ------------[ cut here ]------------ [ 31.559343] WARNING: CPU: 1 PID: 2747 at mm/vmalloc.c:1446 __vunmap+0xe3/0x110() [ 31.559344] Trying to vfree() nonexistent vm area (ffffc90001f2b000) [ 31.559345] Modules linked in: [ 31.565620] 0000000000000bba ffff88002a0cbdb0 ffffffff818f0497 ffff88003b9ba148 [ 31.566347] ffff88002a0cbde0 ffffffff8156f515 ffff88003b9ba148 0000000000000bba [ 31.567073] 0000000000000000 0000000000000000 ffff88002a0cbe88 ffffffff8156c10a [ 31.567793] Call Trace: [ 31.568034] [<ffffffff818f0497>] dump_stack+0x4e/0x7a [ 31.568510] [<ffffffff8156f515>] ubi_io_write_vid_hdr+0x155/0x160 [ 31.569084] [<ffffffff8156c10a>] ubi_eba_write_leb+0x23a/0x870 [ 31.569628] [<ffffffff81569b36>] vol_cdev_write+0x226/0x380 [ 31.570155] [<ffffffff81179265>] vfs_write+0xb5/0x1f0 [ 31.570627] [<ffffffff81179f8a>] SyS_pwrite64+0x6a/0xa0 [ 31.571123] [<ffffffff818fde12>] system_call_fastpath+0x16/0x1b Cc: <stable@vger.kernel.org> Signed-off-by: Richard Weinberger <richard@nod.at> Signed-off-by: Artem Bityutskiy <artem.bityutskiy@linux.intel.com>		2014-11-07 15:14:09 +02:00
..
chips	mtd: cfi_cmdset_0001.c: fix resume for LH28F640BF chips	2014-10-29 18:50:52 -07:00
devices	mtd: m25p80,spi-nor: Fix module aliases for m25p80	2014-10-21 13:46:03 -07:00
lpddr	mtd: lpddr: fix Kconfig dependency, for I/O accessors	2014-05-26 10:38:25 -07:00
maps	mtd: physmap_of: Add non-obsolete map_rom probe	2014-09-22 10:13:13 -07:00
nand	Three main MTD fixes for 3.18:	2014-11-02 14:45:52 -08:00
onenand	mtd: onenand: remove s5pc100 related onenand codes	2014-07-13 07:35:14 +09:00
spi-nor	mtd: m25p80,spi-nor: Fix module aliases for m25p80	2014-10-21 13:46:03 -07:00
tests	mtd: tests: fix integer overflow issues	2014-08-19 11:53:08 -07:00
ubi	UBI: Fix invalid vfree()	2014-11-07 15:14:09 +02:00
afs.c
ar7part.c
bcm47xxpart.c	mtd: bcm47xxpart: find NVRAM partitions in middle blocks	2014-09-17 23:15:38 -07:00
bcm63xxpart.c
cmdlinepart.c	mtd: cmdlinepart: Spelling s/trucate/truncate/	2014-07-02 15:17:15 -07:00
ftl.c	mtd/ftl: fix the double free of the buffers allocated in build_maps()	2014-07-14 18:41:20 -07:00
inftlcore.c
inftlmount.c	mtd: delete non-required instances of include <linux/init.h>	2014-03-10 22:42:22 -07:00
Kconfig	mtd: spi-nor: add the framework for SPI NOR	2014-04-14 11:22:58 -07:00
Makefile	mtd: spi-nor: shorten Kconfig naming	2014-04-14 11:23:01 -07:00
mtd_blkdevs.c	block: disable entropy contributions for nonrot devices	2014-10-04 10:55:32 -06:00
mtdblock_ro.c
mtdblock.c
mtdchar.c	mtd: terminate user-provided string	2014-08-19 11:53:09 -07:00
mtdconcat.c
mtdcore.c	mtd: remove dead non-char logic	2014-08-19 11:53:08 -07:00
mtdcore.h
mtdoops.c
mtdpart.c	mtd: Account for BBT blocks when a partition is being allocated	2014-07-08 18:38:29 -07:00
mtdsuper.c
mtdswap.c	mtd: use __packed shorthand	2014-08-19 11:53:08 -07:00
nftlcore.c
nftlmount.c
ofpart.c
redboot.c
rfd_ftl.c	mtd: remove some duplicative checks	2014-03-10 22:42:25 -07:00
sm_ftl.c	mtd: sm_ftl: initialize error code	2014-08-19 11:53:07 -07:00
sm_ftl.h
ssfdc.c